Privacy policy

Dice Grandmaster is operated by ArchiusComus — Mika Lahti, sole proprietor. Mika Lahti is the person responsible for deciding how your personal data is used (the data controller). Apple may display Mika Lahti as the seller under the individual developer membership.

For privacy questions or requests, contact privacy.dicerivals@archiuscomus.com. This policy covers the Dice Grandmaster website and iPhone app. Last updated: 20 October 2026.

What we collect and why

• Account details: your email address, chosen nickname, account identifier, verification status and authentication information. Amazon Cognito handles passwords and sign-in. We use these to create and secure your account and provide online play.
• Gameplay: online match participants, board state, moves, results, timestamps, turn deadlines, matchmaking entries, levels and points. We use these to run fair matches, enforce the rules and calculate rankings.
• Notifications: your reminder preferences, temporary activity information indicating whether a match is open, and, if you enable iPhone alerts, a device installation identifier, Apple push token and delivery environment. We use these to send turn and result alerts and avoid reminders while you are viewing that match.
• Technical information: our hosting and delivery providers process network information such as IP addresses and request metadata to deliver and protect the service. Application error logs are used for reliability and troubleshooting.
• Messages you send us: your contact details and the information you include in support or privacy correspondence. Please do not send passwords or verification codes.

Your email is required for registration and account recovery; you cannot use online account features without it. Local multiplayer and computer practice do not require an account.

What other players can see

Your nickname, match results and ranking information may be visible to opponents and on public leaderboards. An invitation holder can see the host nickname and invitation settings. Your email address, authentication credentials and notification tokens are not shown to other players. Do not include personal or sensitive information in your nickname.

Legal bases

We process account and gameplay data to provide the service you request (performance of a contract). We rely on legitimate interests to secure the service, prevent misuse, resolve support issues and maintain reliable operation, balancing those interests with your rights. Optional reminders are based on your consent and preferences; you can switch them off at any time without losing access to the game. We may retain limited information where required by law or necessary to establish, exercise or defend legal claims.

Matchmaking, points, levels and timeouts are calculated automatically using game rules. These game decisions do not have legal or similarly significant effects on you.

Storage on your device

The website uses browser storage for saved local games, preferences and sign-in sessions. The iPhone app stores its persistent sign-in refresh token and sign-in email in the iOS Keychain; access tokens are held in memory. Native notification settings are stored on your device. These are used for the requested features, not advertising tracking. Local saved games can remain until you replace them or clear app/browser data. Keychain data may survive uninstalling the app; signing out clears the stored Dice Grandmaster session.

Service providers and international processing

We use Amazon Web Services for hosting, Cognito authentication, the game database and optional email delivery, and Apple Push Notification service for iPhone alerts. Core account and game services are configured in AWS’s Ireland region. Website delivery uses a global content-delivery network; Apple and AWS may process technical or delivery data outside the European Economic Area. Where an international transfer requires safeguards, applicable provider contractual safeguards, including standard contractual clauses or a relevant adequacy framework, apply. Contact us for information about the safeguards relevant to your data.

We do not sell your personal data. The current version has no advertising SDK, third-party analytics SDK or cross-app advertising tracking. If that changes, we will update this policy and obtain any required consent before enabling the new processing. We may disclose data when legally required or to protect the service and users.

How long data remains

• Account profiles, all-time points and levels remain while your account is active, until deletion.
• Online match records are scheduled to expire 30 days after their last saved update. A public queue can continue while you remain in it.
• Weekly leaderboard records are scheduled to expire 14 days after the start of their leaderboard week. Weeks start Sunday at 00:00 UTC.
• Push registrations expire 30 days after their last renewal; active apps renew them. Presence records are scheduled to expire after three minutes; individual activity indications expire after 90 seconds. Notification jobs have short expiry periods tied to their match or event.
• Application logs are retained for 14 days. Database recovery backups can retain older copies for up to 35 days.

Scheduled database expiry is asynchronous, so removal may occur later than the expiry timestamp. Support correspondence is kept as long as needed to handle your request and any related legal obligations, then deleted or minimized.

Delete your account

While signed in, open Your profile → Account & online games → Delete account. Review the consequences, type DELETE and confirm. You can initiate deletion in either the website or iPhone app without contacting support.

After the request is accepted, account access is blocked immediately and automatic deletion is queued. Removal normally completes within 24 hours; contact us if it appears delayed. We remove the Cognito account, profile, leaderboard entries, notification registrations and associated personal records. Waiting matches are cancelled. Active matches are forfeited, and opponents retain their results. Retained match records replace your account identifier and nickname with an anonymous deleted-player entry.

A hashed account identifier is retained for up to 35 days after completion to prevent old sessions from recreating your data. Recovery backups and existing logs expire on the schedules above and are not used to restore a deleted account to active service. Deleting your online account does not erase unrelated local practice saves on your device. Any data that must legally be retained will be restricted to that purpose.

Your choices and rights

You can change your nickname when you have no active matches, adjust reminder preferences, sign out or request account deletion. Where applicable, you can request access, correction, erasure, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent for optional processing. Withdrawal does not affect processing already carried out lawfully.

Send requests to privacy.dicerivals@archiuscomus.com. We may ask for proportionate information to verify your identity. We normally respond within one month and explain any lawful extension. You can complain to your local data-protection authority, including Finland’s Office of the Data Protection Ombudsman.

Children and changes

Local play is available without registering. Where parental authorization is legally required for a child’s online account or optional processing, it must be obtained. Contact us if you believe a child has supplied personal information without the required authorization.

We will update this page when our practices change, show the revised date, and provide additional notice or request consent when required.